← Back

Hitachi

hitachi

202 CVEs • 278 products

Products (278)

Click to collapse
Toggle
Linkone
linkone
Eh View
eh-view
Gr3000
gr3000
Gr4000
gr4000
Web Server
web_server
Gr2000
gr2000

CVEs (202)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Hitachi
2Vantara Pentaho
Vantara Pentaho Business Analytics Server
Jun 17, 2026
May 24, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data without constraining the parser to approved classes and methods. 
1Hitachi
1Ops Center Analyzer
Jun 17, 2026
May 23, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component) allows Reflected XSS.This issue affects Hitachi Ops Center Analyzer: from 10.9.1-00 before 10.9.2-00....Show more
Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component) allows Reflected XSS.This issue affects Hitachi Ops Center Analyzer: from 10.9.1-00 before 10.9.2-00. Show less
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into the Pentaho User Console through session variables. 
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in an error message when an invalid character is used within a Pentaho Rep...Show more
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in an error message when an invalid character is used within a Pentaho Report (*.prpt).  Show less
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name. 
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly protect the Post Analysis service endpoint of the data access plugin against out-of-band XML Extern...Show more
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly protect the Post Analysis service endpoint of the data access plugin against out-of-band XML External Entity Reference.  Show less
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x do not correctly perform an authorization check in the data source management service. 
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented.
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of Pentaho Reports (*.prpt) through the JVM...Show more
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of Pentaho Reports (*.prpt) through the JVM script manager.  Show less
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username and password of clusters in clear text into system logs. 
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x, using the Pentaho Data Access plugin exposes a service endpoint for CSV import which allows a user supplied path to...Show more
Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x, using the Pentaho Data Access plugin exposes a service endpoint for CSV import which allows a user supplied path to access resources that are out of bounds.   Show less
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
6.3 MEDIUM· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of the Community Dashboard Editor (CDE) plug...Show more
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator to disable scripting capabilities of the Community Dashboard Editor (CDE) plugin.  Show less
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x is installed with a sample HSQLDB data source configured with stored procedures enabled. 
1Hitachi
1Vantara Pentaho Business Analytics Server
Jun 17, 2026
Apr 3, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.
1Hitachi
2Infrastructure Analytics Advisor
Ops Center Analyzer
Jun 17, 2026
Feb 28, 2023
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Att...Show more
Improper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Attack.This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.1-00. Show less
1Hitachi
1Ops Center Analyzer
Jun 17, 2026
Feb 28, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops...Show more
Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to read and write specific files.This issue affects Hitachi Ops Center Analyzer: from 10.9.0-00 before 10.9.0-01. Show less
1Hitachi
5Automation Director
Infrastructure Analytics AdvisorOps Center Analyzer+2 more
Jun 17, 2026
Feb 28, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infrastructure Analytics Advisor, Analytics probe server components), Hitach...Show more
Incorrect Default Permissions vulnerability in Hitachi Automation Director on Linux, Hitachi Infrastructure Analytics Advisor on Linux (Hitachi Infrastructure Analytics Advisor, Analytics probe server components), Hitachi Ops Center Automator on Linux, Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer, Analyzer probe server components), Hitachi Ops Center Viewpoint on Linux (Viewpoint RAID Agent component) allows local users to read and write specific files. This issue affects Hitachi Automation Director: from 8.2.0-00 through 10.6.1-00; Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.0.0-00; Hitachi Ops Center Automator: before 10.9.1-00; Hitachi Ops Center Analyzer: before 10.9.1-00; Hitachi Ops Center Viewpoint: before 10.9.1-00. Show less
1Hitachi
1Storage Plug In
Jun 17, 2026
Jan 31, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: f...Show more
Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.9.0 before 04.9.1. Show less
1Hitachi
1Storage Plug In
Jun 17, 2026
Jan 31, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: f...Show more
Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.1. Show less
1Hitachi
1Tuning Manager
Jun 17, 2026
Jan 17, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, Hitachi Tuning Manager - Agent for NAS, Hitachi Tuning Manager - Age...Show more
Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Linux (Hitachi Tuning Manager server, Hitachi Tuning Manager - Agent for RAID, Hitachi Tuning Manager - Agent for NAS, Hitachi Tuning Manager - Agent for SAN Switch components) allows local users to read and write specific files.This issue affects Hitachi Tuning Manager: before 8.8.5-00. Show less